MS Word "wazzu" protection
sufflib@tiac.net
Sun, 24 Aug 1997 22:29:35 -0400
Date: Sun, 24 Aug 1997 22:29:35 -0400
Message-Id: <3.0.32.19970824223407.007c1b40@tiac.net>
From: sufflib@tiac.net
To: Multiple recipients of list <conntech>
Subject: MS Word "wazzu" protection
Connecticut libraries with public access computers are being hit with a
macro virus called wazzu which is infecting Microsoft Word files.
The wazzu virus consists of the macro "AUTOOPEN." Every time a document is
opened, wazzu will activate. It will then infect either the template
NORMAL.DOT or the document itself. Between one and three words in the
document are randomly moved to another location. Additionally, the word
"wazzu" may be inserted into the document at a random location.
-----------------------------
The following information on Word macro viruses in Word 6.0 for Windows
3.1, Word 6.0.1 for the Macintosh, Word 6.0 for Windows NT, Word for
Windows 95 was obtained from the Microsoft Web site.
Q: What are macro viruses?
A: Macro viruses are a new type of virus that use an application's own
macro programming language to distribute themselves. Unlike previous
viruses, macro viruses do not infect programs; they infect documents.
Q: What is the Macro Virus Protection tool?
A: The Macro Virus Protection tool is a free tool that installs a set of
protective macros which detect suspicious Word files and alert customers to
the potential risk of opening files with macros. Upon being alerted, users
are given the choice of opening the file without executing the macros,
thereby ensuring that no viruses are transmitted.
Q: How does this new tool work?
A: The Macro Virus Protection tool installs a set of protective macros into
the user's Normal template. If the user opens a document containing macros,
the protective macros are activated and the user is alerted to the
potential risk of opening files containing macros. The user is given the
choice of opening the file without executing the macros, opening the file
as is, or canceling the file open operation. Opening the file without
macros ensures that macro viruses are not transmitted and does not affect
the content of the document. Unless the user can verify that the macros
contained in the document will not cause damage, Microsoft recommends
opening the file without macros.
The Microsoft Macro Virus Protection tool can be downloaded at:
http://www.microsoft.com/word/freestuff/mvtool/virusinfo.htm
Joe Cadieux
Kent Memorial Library
Suffield, CT
P.S. Just an aside, but an interesting page on Computer Virus Myths and
Hoaxes can be found at: http://kumite.com/myths/